Route Origin Authorization
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31322e302f32332d3234203d3e2037303130.roa
File: 3138352e3230342e31322e302f32332d3234203d3e2037303130.roa (raw, json)
Hash identifier: jYTgcOfbk9bjq+6wsdfbqqj91vyiJUyqR79FO1mbmrc=
Subject key identifier: FF:06:A2:91:AC:EE:9C:68:47:D4:CE:DA:69:35:3F:35:E6:22:36:EE
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 36313AAB7A68543E105787EDD3309C02704663A0
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31322e302f32332d3234203d3e2037303130.roa
Signing time: Fri 26 Jun 2026 21:02:52 +0000
ROA not before: Fri 26 Jun 2026 20:57:52 +0000
ROA not after: Fri 25 Jun 2027 21:02:52 +0000
asID: 7010
IP address blocks: 185.204.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 19:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:31:3a:ab:7a:68:54:3e:10:57:87:ed:d3:30:9c:02:70:46:63:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Jun 26 20:57:52 2026 GMT
Not After : Jun 25 21:02:52 2027 GMT
Subject: CN=FF06A291ACEE9C6847D4CEDA69353F35E62236EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:bc:c9:0f:6b:98:15:47:20:b9:3e:dd:92:
27:48:5e:72:9a:92:48:b3:d7:0c:60:14:c1:f5:c2:
d1:12:9d:0e:9a:8e:6c:77:a3:b7:2e:b0:21:ef:1f:
02:68:8c:cb:4b:77:eb:d8:00:c5:a1:cf:e8:6d:c5:
6f:5b:7b:00:62:6c:85:1d:8a:ca:40:42:d6:93:b0:
89:2e:74:66:d3:49:ef:5f:2c:ed:20:4e:62:98:c1:
3a:ab:b7:28:58:9c:1a:1b:30:82:d5:95:72:4d:9d:
ce:a9:72:c1:e9:db:97:f1:d5:45:40:3b:6b:a9:fb:
a0:5b:2f:39:01:21:44:c1:e5:88:33:9e:4f:d8:69:
8a:96:bd:41:96:d4:61:91:3d:01:6b:34:27:d6:02:
90:d9:39:33:9e:00:8a:2d:d0:82:2e:37:ee:18:b5:
14:ab:1a:eb:51:44:cf:3d:1d:b2:14:78:1e:35:d4:
02:1d:c8:65:25:d5:2d:0d:30:bd:90:59:53:a5:66:
2a:07:f7:03:fd:5e:9d:d9:a7:ad:cc:d7:5a:f5:08:
ce:26:9d:2c:96:12:a0:72:dc:01:19:09:1c:6b:81:
27:6f:66:ff:14:1f:b8:ac:18:47:71:ab:8a:7a:e2:
53:29:72:7d:9e:18:58:1c:cc:7b:2e:a3:32:20:4b:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:06:A2:91:AC:EE:9C:68:47:D4:CE:DA:69:35:3F:35:E6:22:36:EE
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/3138352e3230342e31322e302f32332d3234203d3e2037303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.12.0/23
Signature Algorithm: sha256WithRSAEncryption
06:32:b3:aa:77:57:99:02:29:17:d8:ac:0c:27:a8:43:7d:f3:
7b:3f:fe:04:46:9f:14:58:c7:1c:e3:4b:fa:3b:c3:8b:7c:5d:
c4:a9:cc:88:d2:0b:be:b8:ef:77:6e:d5:34:39:92:42:af:99:
17:63:d1:30:1b:ce:a5:02:6d:80:15:08:16:79:08:c4:c4:0a:
a6:93:05:6c:0f:0b:44:02:e0:93:9e:b2:9d:0b:29:e3:a8:bf:
02:46:0c:82:43:03:50:cb:94:58:b1:7f:6e:97:bd:b6:01:f1:
88:db:69:62:e7:62:04:eb:5c:85:10:48:cc:34:4b:16:9b:79:
2a:98:13:66:39:a4:fe:83:44:8c:0e:e0:7a:68:d7:38:d5:5f:
89:78:7c:31:01:c8:4c:a8:da:e7:f7:e8:43:c4:b5:38:dd:16:
66:1c:6d:2a:0e:c0:a9:d6:da:70:a3:b6:86:47:a2:b0:f8:3f:
ee:3a:f9:aa:38:c5:08:ec:4a:32:f8:38:99:c4:70:1f:74:52:
4d:90:3d:6a:37:6e:ff:f8:bd:19:23:84:7b:09:77:80:3f:6a:
8b:1e:c7:24:45:75:ae:b5:98:c4:c9:80:7f:9d:5d:b9:f3:21:
be:6e:70:fd:26:2b:26:41:93:5a:e6:47:6f:9b:8c:d1:e5:96:
5c:87:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:27:42 2026 by rpki-client